Related Vulnerabilities: CVE-2018-12389  

Several memory safety bugs have been found in Thunderbird versions prior to 63.0. Some of these bugs showed evidence of memory corruption and Mozilla engineers presume that with enough effort some of these could be exploited to run arbitrary code.

Severity Critical

Remote Yes

Type Arbitrary code execution

Description

Several memory safety bugs have been found in Thunderbird versions prior to 63.0. Some of these bugs showed evidence of memory corruption and Mozilla engineers presume that with enough effort some of these could be exploited to run arbitrary code.

AVG-803 thunderbird 60.2.1-2 60.3.0-1 Critical Fixed

06 Nov 2018 ASA-201811-10 AVG-803 thunderbird Critical arbitrary code execution

https://www.mozilla.org/en-US/security/advisories/mfsa2018-28/#CVE-2018-12390